detailed APR/SSL logging

2014-01-07 Thread Sanaullah
Hi, Anyone knows, how do i can get the detailed APR/SSL debug logs. i need to know where my SSL session is getting broken? there is nothing in the catalina.out log. usage: java org.apache.catalina.startup.Catalina [ -config {pathname} ] [ -nonaming ] { -help | start | stop } Jan 07, 2014

Re: Packet misses in Tomcat

2014-01-07 Thread André Warnier
Divyaprakash Y wrote: Issue: Few packets do not reach the application servlet but tomcat receives them. The missing packets reach the HTTP layer and thereafter they disappear. This issue is not frequent but occasionally consistent. For the POSTs of missing packet I am not able to find the

RE: Packet misses in Tomcat

2014-01-07 Thread Divyaprakash Y
Issue: Few packets do not reach the application servlet but tomcat receives them. The missing packets reach the HTTP layer and thereafter they disappear. This issue is not frequent but occasionally consistent. For the POSTs of missing packet I am not able to find the entry in

RE: detailed APR/SSL logging

2014-01-07 Thread Martin Gainty
Date: Tue, 7 Jan 2014 14:51:21 +0500 Subject: detailed APR/SSL logging From: sanaulla...@gmail.com To: users@tomcat.apache.org Hi, Anyone knows, how do i can get the detailed APR/SSL debug logs. i need to know where my SSL session is getting broken? there is nothing in the

Re: detailed APR/SSL logging

2014-01-07 Thread Sanaullah
Here is my configuration. I am using openssl. I haven't installed any certificate to JVM truststore. Connector address=0.0.0.0 port=8443 SSLEnabled=true maxThreads=150 scheme=https secure=true clientAuth=false

Re: detailed APR/SSL logging

2014-01-07 Thread Sanaullah
This issue is only with my ECC certificates. the whole configuration works pretty good with TLS1.2 when i am using the RSA certs. openssl selfsinged ECC certs are also working. On Tue, Jan 7, 2014 at 5:56 PM, Sanaullah sanaulla...@gmail.com wrote: Here is my configuration. I am using openssl.

Re: Packet misses in Tomcat

2014-01-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 1/7/14, 5:09 AM, André Warnier wrote: I do not pretend to know your system, nor your application, nor that the following is a definite explanation. But on the base of the currently available data, I would say : - it is quite unlikely

Re: detailed APR/SSL logging

2014-01-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sanaullah, On 1/7/14, 8:06 AM, Sanaullah wrote: This issue is only with my ECC certificates. the whole configuration works pretty good with TLS1.2 when i am using the RSA certs. openssl selfsinged ECC certs are also working. On Tue, Jan 7,

Re: rc-10 bug?

2014-01-07 Thread Konstantin Kolinko
2014/1/6 Peter peterdni...@yahoo.com: Thanks to an email from Martin, I had a strong indicator of where to look. I checked out tomcat 8 from trunk and validated in eclipse in debug mode. (FYI build.properties.default is broken due to missing commons pool, had to tweak a bit). From

Re: Problem configuring SSL

2014-01-07 Thread Alex Kogan
Gentlemen, thanks a lot for your help. I figured out what the problem was. It was not related to tomcat configuration, but to my keystore. The reason is that once you import a client certificate under the same alias as the private pair, they both get merged under the same alias inside keystore.

Re: detailed APR/SSL logging

2014-01-07 Thread Sanaullah
I am still stick to my opinion.. the patches were need to apply for TLS 1.2 SSL/APR. everything is working after applying the patch just this chain ECC certs. I am just looking around where to get the detailed logs. On Tue, Jan 7, 2014 at 11:11 PM, Christopher Schultz

Re: Problem configuring SSL

2014-01-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex, On 1/7/14, 2:41 PM, Alex Kogan wrote: Gentlemen, thanks a lot for your help. I figured out what the problem was. It was not related to tomcat configuration, but to my keystore. The reason is that once you import a client certificate under

Re: Packet misses in Tomcat

2014-01-07 Thread André Warnier
Christopher, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 1/7/14, 5:09 AM, André Warnier wrote: I do not pretend to know your system, nor your application, nor that the following is a definite explanation. But on the base of the currently available

RE: Problem configuring SSL

2014-01-07 Thread Martin Gainty
Date: Tue, 7 Jan 2014 14:41:15 -0500 Subject: Re: Problem configuring SSL From: a-ko...@northwestern.edu To: users@tomcat.apache.org Gentlemen, thanks a lot for your help. I figured out what the problem was. It was not related to tomcat configuration, but to my keystore. The reason